[Bug 827331] New: Desktop ask for root password to cancel user print jobs.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c0 Summary: Desktop ask for root password to cancel user print jobs. Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Printing AssignedTo: jsmeix@suse.com ReportedBy: carlos.e.r@opensuse.org QAContact: jsmeix@suse.com Found By: --- Blocker: --- sing XFCE in 12.3, I get prompted for root's password to cancel a user print job (see attached screenshot). However, if I go to CUPs web page, I can cancel the jobs without any password. The error message mentions "org.opensuse.cupspkhelper.mechanism.job-edit". This is related to Bug 827196 - KDE Printer Control Module needs root password Two Times. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c1 --- Comment #1 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-06-28 08:52:29 UTC --- Created an attachment (id=546200) --> (http://bugzilla.novell.com/attachment.cgi?id=546200) screenshot of xfce dialog asking for root's password. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c2 Johannes Meixner <jsmeix@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Printing |Xfce Platform|Other |All Found By|--- |Community User AssignedTo|jsmeix@suse.com |bnc-team-xfce@forge.provo.n | |ovell.com QAContact|jsmeix@suse.com |qa-bugs@suse.de Summary|Desktop ask for root |XFCE desktop ask for root |password to cancel user |password to cancel user |print jobs. |print jobs. OS/Version|Other |openSUSE 12.3 --- Comment #2 from Johannes Meixner <jsmeix@suse.com> 2013-06-28 11:09:27 CEST --- I already wrote in https://bugzilla.novell.com/show_bug.cgi?id=827196#c1 The Bugzilla component Printing is primarily meant for the base printing system (CUPS and printer driver packages) but not for user application programs that provide printing related functionality, compare its matching Printing development project in the openSUSE build service https://build.opensuse.org/project/show?project=Printing I guess it does not depend on the platform but happens on "all" platforms. I cannot help here because I don't know what the XFCE desktop does when cancelling print jobs. FYI: In general a normal user "foo" should be not allowed by default to cancel print jobs of user "bar". By default a normal usuer should be only allowed to cancel his own print jobs. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c3 Guido Berhörster <gber@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Xfce |GNOME AssignedTo|bnc-team-xfce@forge.provo.n |bnc-team-gnome@forge.provo. |ovell.com |novell.com --- Comment #3 from Guido Berhörster <gber@opensuse.org> 2013-06-28 09:46:51 UTC --- That is system-config-printer, nothing to do with Xfce. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c4 Carlos Robinson <carlos.e.r@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|GNOME |Printing Platform|All |Other Found By|Community User |--- OS/Version|openSUSE 12.3 |Other --- Comment #4 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-06-28 11:07:55 UTC --- Should we change the component to xfce or to gnome? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c5 Carlos Robinson <carlos.e.r@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Printing |GNOME Platform|Other |All OS/Version|Other |openSUSE 12.3 --- Comment #5 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-06-28 11:19:57 UTC --- I see some changes in the email from bugzilla that I did not do myself - but the email says _I_ did: Carlos Robinson <...@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|GNOME |Printing Platform|All |Other Found By|Community User |--- OS/Version|openSUSE 12.3 |Other I must emphatically say that I did not change ANY of that! It is the second time such a disaster happens! :-/ Reverting. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c Carlos Robinson <carlos.e.r@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Found By|--- |Community User -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c6 Lee Loncosky <lloncosky@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lloncosky@gmail.com --- Comment #6 from Lee Loncosky <lloncosky@gmail.com> 2013-06-30 04:39:51 UTC --- This bug and the one I filed 827196 are probably related to bnc#752454 as indicated by Johannes Meixner. Since you can change printers with the KDE print module, ie use a ppd file, then there is a vulnerability of some sort. Here is how I see things: Just remove the ability to add printers via kde module or whatever printer settings gui you prefer and let users manipulate everything else without password of any kind. So you would have (2) seperate settings: 1) add a printer (root password) 2) configure printers --- anybody or any group type security. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c7 --- Comment #7 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-06-30 08:33:24 UTC --- Clarification: I'm not using any KDE thing. I can Cancel as user jobs I have initiated with the same user, using the cups web interface, or via "lprm JOBNUM" as user. However, XFCE asks for ROOT's password to do the same (presumably using Gnome print dialog). I don't know if once or twice, once is bad enough. Ie, the desktop is not honouring cups settings. Even if the design decision is not to honour them, root password is excessive. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c8 --- Comment #8 from Johannes Meixner <jsmeix@suse.com> 2013-07-09 17:55:53 CEST --- FYI: Regarding different behaviour when CUPS is used versus when Gnome print stuff is used, have a look at https://bugzilla.novell.com/show_bug.cgi?id=749451#c8 and the subsequent comments therein. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c9 --- Comment #9 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-07-09 18:56:12 UTC --- (In reply to comment #8)
FYI: Regarding different behaviour when CUPS is used versus when Gnome print stuff is used, have a look at https://bugzilla.novell.com/show_bug.cgi?id=749451#c8 and the subsequent comments therein.
Please note that Bugzilla is about "Adding a new printer", whereas this one is about a user cancelling his own job. This can be done by the user using CUPS CLI or HTTP, but not via gnome/xfce print interface. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c10 --- Comment #10 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-07-09 23:28:09 UTC --- (In reply to comment #5)
I see some changes in the email from bugzilla that I did not do myself - but the email says _I_ did: .. Reverting.
This is Bug 828779 - Firefox refresh badly on Bugzilla -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c11 Johannes Meixner <jsmeix@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsmeix@suse.com Summary|XFCE desktop ask for root |Gnome printing policies are |password to cancel user |not in compliance with CUPS |print jobs. |policies --- Comment #11 from Johannes Meixner <jsmeix@suse.com> 2013-07-10 10:35:31 CEST --- My comment#8 was meant to point out that there are different sets of policies used here, see https://bugzilla.novell.com/show_bug.cgi?id=749451#c9 This means: When you do something using CUPS directly (e.g. CUPS command line tools or the CUPS web interface or using applictions that work in full compliance with CUPS), then CUPS' own policies (the so called "CUPS Operation Policies") are used as described in http://www.cups.org/documentation.php/doc-1.5/policies.html In contrast when you use Gnome printing tools, then the Gnome policies are used "which are defined the policykit way" and the "PolicyKit settings are controlled by polkit-default-privs (and set_polkit_default_privs, that applies the defined policies)", see https://bugzilla.novell.com/show_bug.cgi?id=749451#c9 and https://bugzilla.novell.com/show_bug.cgi?id=749451#c12 As a result you can cancel your own print jobs when using CUPS directly but not when using Gnome printing tools. In the end this issue here is exactly an example of what https://bugzilla.novell.com/show_bug.cgi?id=749451#c8 and the subsequent comments there describe in general. Accordingly I change the subject of this issue here from "XFCE desktop ask for root password to cancel user print jobs" to "Gnome printing policies are not in compliance with CUPS policies" Acording to https://bugzilla.novell.com/show_bug.cgi?id=749451#c9 the difference in policies is intentional because Gnome wants "to offer a consistent way to define policies on the machine". Therefore - from my current point of view - it seems the bug here is no bug but intentional so that it could be closed as "invalid". But I am not involved in Gnome so that I leave it for the Gnome people to actually decide what to do here. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c12 --- Comment #12 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-07-10 11:06:26 UTC --- I see, I understand. But my original point still stands: it is not acceptable that Gnome asks for the root password to cancel your own print job. I can accept that CUPS and Gnome printer/print policies be different. I can accept that you need root password to add/remove/configure a printer. But I can not accept that you need root password to cancel your own job! Imagine a business environment, that you send a 1000 page doc to the printer on error, want to cancel it, and then you need to locate the admin to cancel it! Absurd, no? Well... I propose that the original title or this report be reinstated (or equivalent): XFCE/Gnome desktop asks for root password to cancel user print jobs. (xfce uses gnome print module) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c Johannes Meixner <jsmeix@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Gnome printing policies are |Gnome printing policies ask |not in compliance with CUPS |for root password to cancel |policies |desktop user's own print | |jobs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c13 --- Comment #13 from Johannes Meixner <jsmeix@suse.com> 2013-07-10 13:38:00 CEST --- Thanks for your clarification! I agree. I even think that the default Gnome printing policies should match the default CUPS Operation Policies. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=827331 https://bugzilla.novell.com/show_bug.cgi?id=827331#c14 --- Comment #14 from Carlos Robinson <carlos.e.r@opensuse.org> 2013-07-10 12:18:07 UTC --- (In reply to comment #13)
Thanks for your clarification! I agree.
Welcome and thanks, too.
I even think that the default Gnome printing policies should match the default CUPS Operation Policies.
Me too... but I have no say in the matter. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com